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We consider a special form of state discrimination in which after the measurement we are given 
additional information that may help us identify the state. This task plays a central role in the 
analysis of quantum cryptographic protocols in the noisy-storage model, where the identity of the 
state corresponds to a certain bit string, and the additional information is typically a choice of 
encoding that is initially unknown to the cheating party. We first provide simple optimality con- 
ditions for measurements for any such problem, and show upper and lower bounds on the success 
probability. For a certain class of problems, we furthermore provide tight bounds on how useful 
post-measurement information can be. In particular, we show that for this class finding the optimal 
measurement for the task of state discrimination with post-measurement information does in fact 
reduce to solving a different problem of state discrimination without such information. However, 
we show that for the corresponding classical state discrimination problems with post-measurement 
information such a reduction is impossible, by relating the success probability to the violation of 
Bell inequalities. This suggests the usefulness of post-measurement information as another feature 
that distinguishes the classical from a quantum world. 



I. INTRODUCTION 

One of the characteristic traits of quantum mechan- 
ics is that not all possible states of a physical system 
are perfectly distinguishable. This is in stark contrast to 
the classical world, but enables us to solve cryptographic 
problems such as key distribution [Tl[2] or two-party com- 
putation in the noisy-storage model [31I1]. Nevertheless, 
it is often possible to gain partial knowledge about the 
state. Imagine a physical system is prepared in one out of 
several possible states chosen with a certain probability. 
The set of possible states, as well as the distribution are 
thereby known to us. The goal of state discrimination is 
to identify which state was chosen by performing a mea- 
surement on the system, whereby our aim is to choose 
measurements that maximize the average probability of 
success. This fundamental problem has been studied ex- 
tensively for the past 30 years, starting with the works of 
Helstrom [5 , Holevo and Belavkin [7] (see for a sur- 
vey of known result), and has found many applications 
in quantum information theory (see e.g., [S]), cryptogra- 
phy [10 , and algorithms [TT | I12 j . 

Here, we consider a special twist to the standard state 
discrimination problem introduced in |13j . in which we 
obtain additional information after the measurement that 
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FIG. 2: Using post-measurement information 

may help us to identify the state. This task is easily de- 
scribed in terms of the following game depicted in Fig- 
ure |2j Imagine Alice chooses a state p^t from a finite set 
£ with probability Pxt, labeled by what we will call the 
string x ^ X and the encoding b B. Bob knows £ as 
well as the distribution P = {pxb}xb- Alice then sends the 
state to Bob. Bob may now perform any measurement 
from which he obtains a classical measurement outcome 
k. Afterwards, Alice informs him about the encoding b. 
The task of state discrimination with post-measurement 
information (and no memory) for Bob is to identify the 
string x, using the encoding b and his classical measure- 
ment outcome fc, where we are again interested in maxi- 
mizing Bob's average probability of success over all mea- 
surements he may perform [39 . In [3] it was shown how 
bounds on this success probability can be used to prove 
security in the noisy-storage model. 

Naturally, from a cryptographic standpoint it would 
be useful to know how much the additional information 
b can actually help Bob. Let p^^^^{£, P) and Psucc('^^, P) 
be the maximum average probabilities of success for 
the problem of state discrimination with and without 
post-measurement information respectively. Note that 

Psucc 

(£,P), since we can always choose to 
ignore any additional information. We will measure how 
useful post-measurement information is for Bob in terms 
of the difference in his success probability 

A(f , P) P) - ftucc(f , P) . (1) 

Of course, even in a classical setting post-measurement 
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information can help Bob determine the string x. As a 
very simple example, suppose that x G {0, 1} is a single 
classical bit, and we have only one encoding b G {0, 1}. 
Imagine that Alice chooses x and one of the two en- 
codings uniformly at random and sends Bob the bit 
X (B b ^ X + b mod 2. The states corresponding to this 
encoding are thus given by 

p^b = \xe)b){x®b\ , (2) 

where Pxt = 1/4. Note that Bob now has a randomly 
chosen bit in his possession and hence Psucc(^i P) — 1/2- 
However, he can decode correctly once he receives the 
additional information b and thus pf^^^{£, P) = 1, giving 
us A{£,P) = 1/2. As has been shown in p[3] we always 
havepf^(.(.(f , P) = 1 in the classical world where all states 
Pxb are diagonal in the same basis and orthogonal for 
fixed b. 



However, we will see that a relabeling that renders 
post-measurement information useless is impossible when 
considering a classical ensemble |40| . In particular, we 
will see that as long as we are able to gain some infor- 
mation about the encoded string x without waiting for 
the post-measurement information, then classically we 
cannot hope to find a non-trivial relabeling that makes 
post-measurement information useless. We thereby fo- 
cus on the case of encodings a single bit into two possible 
encodings in detail. Curiously, we will show this by re- 
lating the problem to Bell inequalities [T3], such as for 
example the well-known CHSH inequality [TC . This sug- 
gests that the usefulness of post-measurement informa- 
tion forms another intriguing property that distinguishes 
the quantum from the classical world. 

II. GENERAL BOUNDS 



A. Results 

We first provide a general condition for checking 
the optimality of measurements for our task (see Sec- 
tion II B I. It was shown in [13 that the optimal mea- 
surments can be found numerically using semidefinite 
programming solvers, however in higher dimensions this 
remains prohibitively expensive. We then focus on the 
case which is particularly interesting for cryptography, 
namely when the string x is chosen uniformly and inde- 
pendently from the encoding b. First, we provide upper 
and lower bounds for the success probability pfu^c (Sec- 
tion [HD] and JHC]) . 

In Section |III[ we then show that for a large class of 
encodings (so-called Clifford encodings) our lower bound 
is in fact tight. We thereby explicitely provide the op- 
timal measurements for Clifford encodings. The class of 
encodings we consider includes any encodings into two 
orthogonal pure states in dimension d — 2 such as the 
well-known BB84 encodings [1] , as well as the case where 
we have two possible strings and encodings which can be 
reduced to a problem in dimension d = 2 [T31 [2]. It 
was previously observed that for BB84 encodings post- 
measurement information was useless [13]. Here, we see 
that this is no mere accident, and give a general con- 
dition for when post-measurement information is useless 
for Clifford encodings. We continue by showing that for 
Clifford encodings, we can always perform a relabeling 
of the strings x depending on the encoding b such that 
we obtain a new problem for which post-measurement 
information is indeed useless. This is particularly ap- 
pealing from a cryptographic perspective as it means the 
adversary cannot gain any additional knowledge from the 
post-measurement information. This means that for Clif- 
ford encodings we no longer need to treat the problem 
with post-measurement information any differently, and 
can instead apply the well-studied machinery of state dis- 
crimination. 



Before investigating the use of post-measurement infor- 
mation, we derive general conditions for the optimality 
of measurements for our task. We also provide a general 
bound on the success probability when the distribution 
over X is uniform (i.e., px — ll\X\) and independent of 
the choice of encoding. 



A. SDP formalism 

When considering state discrimination with post- 
measurement information, we can without loss of general- 
ity assume that Bob performs a measurement whose out- 



(1) 



xL 



comes correspond to vectors x = {x 
where each entry corresponds to the answer that Bob 
will give when he later learns which one of the P = 
possible encodings was used. That is, when the encoding 
was 6, Bob will output the guess x^''^ of the vector x [13]. 
In ^3J it was noted that the average probability that 
Bob outputs the correct guess x^^^ when given the post- 
measurement information b maximized over all possible 
measurements (POVMs) can be computed by solving the 
following semidefinite program (SDP). The primal of this 
SDP is given by 

maximize Wprimai = Y^s (J^s'^s) 
subject to Vf e A'^^, > 



where 



f)=l 



(3) 



By forming the Lagrangian, we can easily compute the 
dual of this SDP (see e.g. [TT] Appendix A]) which is 
given by 

minimize Wduai = tr{Q) 
subject to yx e X^^ ,Q > Tg . 
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SDPs can be solved in polynomial time (in the input 
size) using standard algorithms |18j . which also provide 
us with the optimal measurement operators. 



B. Optimality conditions 

However, with the SDP formalism in mind, it is now 
also easy to provide necessary and sufficient conditions 
for when a set of measurement operators {Mj}^ is in fact 
optimal. Similar conditions were derived for the case of 
state discrimination without post-measurement informa- 
tion [71 [T9H23] . A proof can be found in the appendix. 

Lemma II. 1. A POVM with operators {Mg}^ is optimal 
for state discrimination with post-measurement informa- 
tion for the ensemble E — {pxb,Pxb\ if cind only if the 
following two conditions hold: 



1- Q '■— '^s'''sMx is Hermitian. 
2. Q>Ts for allxe X""^. 



we can solve using standard techniques from state dis- 
crimination. Note that without loss of generality, we can 
label the elements of X that we wish to encode from 
0, . . . , N—1, where we let N — The vector x can thus 
be written analogously as a vector x G {0, . . . , N — l}^'" . 
We now partition the set of all possible such vectors as 
follows. Consider a shorter vector of length L — 1, that 
is, y £ {0, . . . ,N — l}'^^-^"^). With every such vector, we 
associate the partition 

Ty = {x = (y^^^ + j mod A^, . . . ,y^^"^^ + j mod A^, 

(5) 

0-fj mod A^) |jG{0,...,A-l}} . 

Note that \T^\ = A^ and if y ^ y wc have Tj; n = 0. 
The union of all such partitions gives us the set of all 
possible vectors x, that is. 



[jTy^^{x\xe{0,...,N-l}'<'^} 



(6) 



C. Upper bound 



With every partition Tg we can now associate a standard 
state discrimination problem without post-measurement 
information in which we try to discriminate states 



We now derive a simple upper bound on the suc- 
cess probability of state discrimination with post- 
measurement information when p^t — PxPb is a product 
distribution, and the string x is chosen uniformly at ran- 
dom (i.e., = I/IA"!). We will use a trick employed by 
Ogawa and Nagaoka [5j in the context of channel coding 
which was later rediscovered in the context of state dis- 
crimination [24 . A proof can be found in the appendix. 

Lemma II. 2. Let N = \X\ be the number of possi- 
ble strings, and suppose that the joint distribution over 
strings and encodings satisfies Pxb ~ Pb/N, where the 
distribution {pb}b is arbitrary. Then 



-^^succ 




(4) 



for all a > 1, where £ = {pxb}xb, P = {Pxbjxb and 

PS — l^b=lPb PxWb- 

Note that the bound on the r.h.s contains very many 
terms, and yet our normalization factor is only 1/A^. Nev- 
ertheless, for many interesting examples we can obtain a 
useful bound this way, by choosing a to be sufficiently 
large. 



PS y^,PbPxii')b 
fc=i 



(7) 



such that X G Tg. That is, the set of states is given 
by = {ps I X G Tg} and p^ — 1/N is the uni- 
form distribution. Note that the original problem of 
state discrimination where we do not receive any post- 
measurement information corresponds to the partition 
given by y — (0, . . . , 0), where we always give the same 
answer no matter what the post-measurement informa- 
tion is going to be. As we show in the appendix 

Lemma II. 3. The success probability with post- 
measurement information is at least as large as the 
success probability of a derived problem without post- 
measurement information, i.e., 



Psucci^^P) > maxps 
y 



In particular, this allows us to apply any known lower 
bounds for the standard task of state discrimination [5S] 
to this problem. Curiously, we will see that there exists 
a large class of problems for which this bound is tight, 
even though A(£, P) > 0, that is, even though post- 
measurement information is useful. 



D. Lower bound 

Similarly, if x is chosen uniformly at random and in- 
dependent of the encoding, we can find a lower bound 
to pfucc- The idea behind this lower bound is to subdi- 
vide the problem into a set of smaller problems which 



III. TIGHT BOUNDS FOR SPECIAL 
ENCODINGS 

We now consider a very special class of problems called 
Clifford encodings, for which we can determine the opti- 
mal measurement explicitly. In this problem, we will only 
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ever encode a single bit x G {0, 1} chosen uniformly at 
random independent of the choice of encoding, and take 
d = 2" dimensional states of the form 



Pxb 




J3)t ■ 



Ixb 
Wlxb 



where ri,...,r2„+i are generators of the Clifford al- 
gebra, that is, anti-commuting operators I41j satisfying 
(r^)^ = I for all j. We also assume that the vector 

= (7il\ ■ • • ,7ifc"^^^) satisfies 7a;6 = -7(i-x)b and 
2 < 1. The distribution over encodings can be ar- 
bitrary. Using the fact that the operators anti-commute, 
it is not hard to see that tr(rjrfc) = for j ^ k and the 
latter condition then ensures that Pxb is a valid quan- 
tum state |26j . that is, pxb is positive semi-definite sat- 
isfying tr{pxb) = 1- The Clifford algebra has a unique 
representation by Hermitian matrices on n qubits (up to 
unitary equivalence) which we fix henceforth. This repre- 
sentation can be obtained via the famous Jordan- Wigner 
transformation |27j: 

= r^(^-i) (g) X 

for J = 1, . . . , n, where we use X, Y and Z to denote the 
Pauli matrices. We also use r2„+i = iVi . . . T2n- 

Note that in dimension d = 2, these operators are sim- 



ply the Pauli matrices Ti = Z,T2 = X and r2n 



+1) 



Y 



and any encoding of the bit x into two orthogonal pure 
states is of the above form. A simple example, is the 
BB84 encoding [1 where we encode the bit x into the 
computational basis labeled by 6 = and into the 
Hadamard basis labeled hy h = 1. Furthermore, if we 
have only two possible strings and encodings, we can al- 
ways reduce the problem to dimension d = 2 |131 114j . 
In higher dimensions, encodings of the above form were 
suggested for the use in cryptographic protocols 126) . 



A. Without post-measurement information 

We now first examine the setting of state discrimina- 
tion without post-measurement information, which will 
provide us with the necessary intuition. Again, we use 
i = to denote the number of possible encodings. Re- 
call the average state p^ from ([t]) for the vector x = 



(x 



(1) 



) , which tells us for every possible encoding 



which bit appears in the sum. We furthermore define the 
complementary vector 2? = ((1— a;'^"'^'), . . . , (1— a;*^"^-')), that 
is^ x + x = 0. As a warmup, suppose we are given and 
ps chosen uniformly at random and wish to determine 
which one. Clearly, this is an example of state discrimi- 
nation without post-measurement information, which can 
also be written as an SDP [531 HH] • The primal is of the 
form 



maximize | (tr{Mgpg) 
subject to Mg > , 

Mg > 
Mg + Mg = : 



tr{Mgpg)) 



(8) Its dual is easily found to be 



minimize 



tr(g) 



subject to Q > hpg 

Q > 2Px 



Analogous to Lemma II. I with = \pg one can derive 
optimality conditions which for the case of state discrim- 
ination were previously obtained in [71 I19H23) . In our 
case they tell us that Q = \{^pgMg -I- pgMg) must be 
Hermitian, and Q is a feasible dual solution. All we have 
to do is thus to guess an optimal measurement, and use 
these conditions to prove its optimality. Consider the 
operators 



Mg 



Mg 




(9) 



where ag 



\vg\\2 is the normalized average vector 



b=l 



Pblx<b)b 



(10) 



Note that since the generators of the Clifford algebra 
anti-commute, we have that Mg, Mg > and Alg + Mg = 
I. Hence, these operators do form a valid measurement. 
In the appendix, we derive two lemmas which show that 
Q = ^{PxMg + pgMg) is Hermitian (Lemma B.l) and 
satisfies Q > \pg for all x (Lemma 
which are the conditions we needed 
proofs can be found in the appendix. 



B.l 



and 



B.2) 



or optimality. All 



Theorem III.l. The measurements given in ([9| are op- 
timal to discriminate pg from pg chosen with equal prob- 
ability. 



B. With post- measurement information 

We are now ready to determine the optimal measure- 
ments for the case with post-measurement information. 
First of all, recall from Lemma[lL3]that we can subdivide 
our problem into smaller parts by partitioning the set of 
strings x. Applied to the present case, these partitions 
are simply given by 



Tg 



{x,x} , 



(11) 
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where for simplicity we here use the vector x itself to 



label the partition. Note that by Lemma II. 3 we thus 
have that 

{£,P) > niaxpsucc('^^'f-) ■ (12) 

X 

We show in the appendix that this bound is in fact tight. 
Lemma III. 2. For Clifford encodings 

Psucci^^P) = niaxpsucc(%) , 



(13) 



and post-measurement information is useless if and only 
if the maximum on the r.h.s. is attained by x — 
(0,...,0). 

Note that the optimal measurement is thus given by ([9| 
for the vector x maximizing the r.h.s of (12 1, and letting 
all other = 0. This shows that for our class of prob- 
lems the problem of finding the optimal measurement can 
be simplified considerably and is easily evaluated. 

It is a very useful consequence of our analysis that for 
any cryptographic application that makes use of such en- 
codings, we can always perform a relabeling of states pxb 
such that post-measurement information becomes use- 
less. More precisely, we will associate x with the new 
all (0, . . . , 0) vector and x with the new (1, . . . , 1) vector. 
That is, for the optimal vector x we let 



Pob ■- PxWb ) 
new 

Plb ■— P(l-xi<'))b 



(14) 
(15) 



Clearly, by Lemma III. 2 we then have for 

{piry^b that 



A(£"™,P) = 



(16) 



as desired. 




FIG. 3: Post-measurement information is useless iff 6 < ^. 
The dashed line corresponds to the Bloch vector of the opti- 
mal measurement using post-measurement information con- 
sisting of two rank one projectors Moo and Mn, which is 
the same measurement one would make for standard state 
discrimination. We output the same bit, no matter what en- 
coding information b we receive. 




C. Example 



FIG. 4: Post-measurement information is useful for 6 > ^. 
The dashed line corresponds to the Bloch vector of the opti- 
mal measurement using post-measurement information con- 
sisting of two rank one projectors Moi and Mio, which is the 
measurement one would make in standard state discrimina- 
tion, if we were to distinguish (poo + Pii)/2 from (poi -|-pio)/2. 
Which bit we output depends on the post-measurement infor- 
mation we receive. 



We now consider a small example that illustrates how 
our statement applies to the case where we have only two 
possible encodings B — {0, 1} into two orthogonal pure 
states in dimension d ~ 2, and we choose the encoding 
uniformly at random {pb = 1/2). A simple example is en- 
coding into the BB84 bases [1 , where we pick the compu- 
tational basis for b — Q and the Hadamard basis for 5 = 1. 
We now show that in two dimensions, post-measurement 
information is useless if and only if the angle between the 
Bloch vectors for the states poo and poi obeys 6* < | as 
illustrated in Figures [3] and |4] 

Note that in this example the average states are given 



P(0,0) 


= \ {POO ' 


l-Poi) , 


(17) 


P(l.l) 


= ^(Pio- 


I-Pll) , 


(18) 


P(0,1) 


= 2 " 


I-Pll) , 


(19) 


P(1,0) 


= ^(Pio- 


(-Poi) • 


(20) 



The two partitions we are considering are T(^ofi) = 



6 



{(0,0), (1,1)} and f(oa) = {(0, 1), (1, 0)}. Let vo and 
vi be the Bloch vectors corresponding to the states poo 
and poi respectively. We have from Lemma [B.2| that 

Amax(Pa) — Aniax(Px) (21) 

f ^ (I + \\vo + vih) for f =(0,0) 



i(I+||vo-t^i||2) for f= (0,1) 



(22) 



Hence, by Lemma |III.2 post-measurement information is 
useless if and only if 



\\vo + vi\\2 > \\vo - W1II2 . (23) 
ll'f^ilU = 1 foi' pure states, we have \\vo + 



Since HvqIU 

vi\\2 = 2+2 cos 9 and H^o— wi II2 — 2—2 cos 9 and thus ( 23 ) 
holds if and only if 9 < ^. The optimal measurement is 
again given by Note that this is rather intuitive, since 
for partition T(q g) we always give the same answer, no 
matter what post-measurement information we receive. 



IV. CLASSICAL ENSEMBLES 

We saw above that for the case of Clifford encodings 
even if post-measurement information was useful for the 
original problem, that is, Psucc{£,P) < pL^cc('^i^): '^^ 
could always perform a relabeling to obtain a new prob- 
lem for which post-measurement information is useless. 
We now show that this is a unique quantum feature, and 
is not present in analogous classical problems as long as 
we are able to gain some information even without post- 
measurement information, i.e., _Psucc('^^, -P) > l/l-^l- We 
thereby call a problem classical if and only if all states 
Pxb commute. 

We again focus on the case where we wish to encode 
a single bit x G {0, 1}. Let n^b be a projector onto the 
support of Pxb- For simplicity, we will assume in the fol- 
lowing that Hob-l-nif, = I for all encodings b, and that the 
projectors are of equal rank r = rank(no;,) = rank(nib). 
We also assume that pxb = ^xb/r. It is straightforward 
to extend our argument to a more general case, but makes 
it more difficult to follow our idea. 

In [13, Lemma 5.1] it was shown that if [Pxb, Px'b'] =^ 
for all bits x, x' and encodings 6, h' of this form 



vllAE,P) = \ 



(24) 



Recall that we are interested in the case where 

Psucc 

(£, P) < pfucc('^'i P)- Hence, our goal will be to show 
that there exists no relabelling as in the previous section 
that allows us to create a new problem for which 

ftucc(f"°",P)=Ps"cc(f,^) = l- 



A. Non-local games 

To show our result, we will need the notion of non- 
local games which are a different way of looking at Bell 



inequalities [T5]. For example, the well-known CHSH in- 
equality I16j takes the following form when converted to 
a game. Imagine two space-like separated parties, Alice 
and Bob. We choose two questions s,t G {0,1} uni- 
formly at random and send them to Alice and Bob re- 
spectively. The rules are that they win the game if and 
only if they manage to return answers a,b £ {0, 1} such 
that s ■ t = a + b mod 2. Without loss of generality, we 
may thereby assume that Alice and Bob perform a mea- 
surement depending on the question they receive, and 
simply return the outcome of that measurement. To help 
them win the game, Alice and Bob may thereby agree on 
any shared state and measurements ahead of time, but 
are no longer able to communicate once the game starts. 
The average probability that they win the game is thus 



3I: 

s.t 



E 

a.b 



Pr[a,b\s,t], (25) 



a+b 



3d 2=s-t 



where Pr[a, fe|s,t] is the probability that they return an- 
swers a and b given questions s and t, and the maxi- 
mization is over all states and measurements allowed in 
a particular theory. Classically, we have 



classical 
^win 



(26) 



In a quantum world, however, Alice and Bob can achieve 



p. 



quantum 



1 



1 



2V2 



0.853 . 



(27) 



More general non-local games are of course possible, 
where we may have a larger number of questions and 
answers, and the rules of the game may be more compli- 
cated. 

Of central importance to us will be the fact that if Al- 
ice's (or Bob's) measurements commute, then there exists 
a classical strategy that achieves the same winning prob- 
ability (see e.g. mj). We now use this fact to prove our 
result. 



B. A classical-quantum gap 

To explain the main idea behind our construction, we 
focus on the case where we only have two possible encod- 
ing L = 2. That is, B = {0, 1} and X = {0, 1}. We also 
assume that the bit X , as well as the encoding b is cho- 
sen uniformly and independently at random. The states 
defining our problem are thus poo, Poi, Pio and pu. We 
again consider the two partitions labeled hy x E {0, 1}^ 
given by 



T(o,o)={(0,0),(l,l)}. 
%i)={(0,l),(l,0)}. 



(28) 
(29) 



As before, we can associate a standard state discrimina- 
tion problem with each of these partitions. For the first 
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partition T^q.o) as wish to discriminate between the states 
P{o,o) and P{i.i) specified by (17 1 and ( jTs] ) where we are 
given one of the two states with equal probabihty. Let 
Pi denote the success probabihty of solving this problem, 
maximized over all possible measurements. Note that 
our condition of being able to gain some information in 
the state discrimination problem corresponds to having 



that pi = p2 



PI 



0.853 



and hence post- 



1 



<Pi 



(30) 



For the second partition 2^(0,1)1 '^6 wish to discriminate 



between P{o,i) and P(i,o) from (19 



and ( 20 ) , again given 



with equal probability. Let p2 denote the correspond- 
ing success probability for the second partition. Note 
that since we have only two possible partitions here con- 
structed in the way outlined in Section |III[ our goal of 
showing that there exists no relabeling that makes post- 
measurement information useless can be rephrased as 
showing that p2 < I. 

We now show that these two state discrimination prob- 
lems arise naturally in the CHSH game. In particular, we 
show in the appendix that 

Lemma IV. 1. There exists a strategy for Alice and Bob 
to succeed at the CHSH game with probability {pi+p2)/2, 
where Alice's measurements are given by the projectors 
{Poo,Pio} and {PouPii}. 

However, recall that if the ensemble of states is classical 
the projectors Pxb all commute, and hence there exists 
a classical strategy for Alice and Bob that also achieves 
a winning probability of (pi +p2)/2. Hence, by (26) we 
must have 



Pi +P2 ^ 3 



(31) 



Using (301 this implies P2 < 3/2 — pi < 1 — Pg^^^., and 
hence the relabelling corresponding to the second parti- 
tion cannot make post-measurement information useless. 
To summarize we obtain that |43j 

Theorem IV. 2. For the case of two encodings of a single 
bit chosen uniformly at random (i.e., Pxb = ^/^), which 
do allow us to gain some information even without post- 
measurement information (^Psucc > l/2j, there exists no 
non-trivial relabeling that renders post-measurement in- 
formation useless. 

Note that if we are able to gain some information in 
both state discrimination problems, i.e., Pi,P2 > 1/2 the 
preceding discussion also implies that pi,P2 < 1, that is, 
post-measurement information is never useless. Bounds 
on Bell inequalities corresponding to bounds on the max- 
imum winning probability that can be achieved in a clas- 
sical world can thus allow us to place bounds on how 
well we can solve state discrimination problems without 
post-measurement information. 

This is in stark contrast to the quantum setting. For 
example, for the BB84 encodings it is not hard to see 



measurement information is always useless. Yet, there 
exist classical encodings [13] for which pi — p2 — 3/4 but 



succ 



To analyze the case of multiple encodings, we have to 
consider more complicated games than the one obtained 
from the CHSH inequality. A natural choice is to consider 
games in which Bob has to solve different state discrim- 
ination problems corresponding to different partitions of 
the vectors x depending on his question t in the game. 
To make a fully general statement we would like to in- 
clude all possible partitions. Clearly, however the above 
approach can also be used to place bounds on the aver- 
age of success probabilities for a subset of partitions by 
defining a game with less questions, and evaluating it's 
maximum classical winning probability. 



CONCLUSIONS 



Our work raises several immediate open questions. 
First of all, can we obtain sharper bounds? Since 
solving an SDP numerically is still very expensive in 
higher dimensions, it would also be interesting to prove 
bounds on how well generic measurements such as the 
square-root measurement (also known as the pretty good 
measurement |29j ) perform. The pretty good measure- 
ment is a special case of Belavkin's weighted measure- 
ments [3 |3DJ [31], which was already used in its cube 
weighted form in [T3j to provide bounds on the state dis- 
crimination with post-measurement information. Such 
bounds have most recently been shown by Tyson [32] 
for standard state discrimination. Yet, no good bounds 
are known on how well such measurements perform for 
our task. More generally, it would be very interesting to 
see whether one can adapt the iterative procedures in- 
vestigated in [55H5S] to find optimal measurements for 
the case of standard state discrimination without post- 
measurement information to this setting. Concerning 
such iterative procedures, we would like to draw special 
attention to the recent work by Tyson [25j generalizing 
monotonicity results for such iterates [37], which could 
be applied here. 

Naturally, it would be very interesting to know if our 
results for Clifford encodings can be extended to a more 
general setting. Our discussion of classical ensembles 
shows that there exist problems for which Psucc < P^ucc 
no matter what relabeling we perform [13j , and hence we 
cannot hope that a similar statement holds in general. 
Nevertheless, it would be interesting to obtain necessary 
and sufficient conditions for when post-measurement is 
already useless, or otherwise can be made useless by per- 
forming a relabeling. 
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In this appendix, we provide the technical details of 
our claims. For ease of reading, we thereby provide the 
proofs together with the statement of the lemmas. 

Appendix A: Proofs of Section [Tl] 

1. Optimality conditions 

Lemma A.l. A POVM with operators {Mg}g is optimal 
for state discrimination with post-measurement informa- 
tion for the ensemble £ = {pxbTPxh} if md only if the 
following two conditions hold: 

1- Q '■= '^gT'sMg is Hermitian. 

2. Q>Ts for allxe X""^. 

Proof. Suppose first that the two conditions hold. Note 
that condition (2) tells us that Q is a feasible solu- 
tion, that is, it satisfies all constraints for the dual 
SDP. By weak duality of SDPs we thus have Wprimai < 
Vdued < ti'('3)j and from condition (1) we also have that 
tr(Q) = Y.x^''(^^s^Ts) < Wprimai- Heucc the POVM forms 
an optimal solution for the SDP. 
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Conversely, suppose that {Mg}g is an optimal solution 
for the primal SDP. Let Q be the optimal solution for the 
dual SDP. Note that this means that Q already satisfies 
condition (2), and all that remains is to show that Q 
has the desired form given by condition (1). Since Mg — 
1/\X^^\ is a feasible solution for the primal SDP, we have 
by Slater's condition [T5j that the optimal values fpi-imai 
and v*^^^i are equal, i.e., v*^.^^^ = v*^^^^. Using the fact 
that J2x ^'^s — I and that the trace is cyclic we thus have 

tr(Q) - ^'(MsTs) = " rs)Ms) = , (Al) 



Since Q > Tg (equivalently Q — rg > 0.), and Mg > for 
all X we have that all the terms tr{{Q — Tg)Mg) in the 
sum are positive and hence we must have for all x that 
tr((Q — Tg)Mg) — 0. Again using the fact that the two 
operators are positive semideflnite, and the cyclicity of 
the trace we thus have for the optimal solution that 



(Q - Tg)Mg = Mg[Q ~ Tg) = 



(A2) 



Summing the l.h.s. over all x and noting that ^ - Mg = I 
then gives us condition (1). □ 



2. Upper bound 

Lemma A. 2. Let N — \X\ he the number of possi- 
ble strings, and suppose that the joint distribution over 
strings and encodings satisfies p^b — Pb/N, where the 
distribution {pb}b is arbitrary. Then 



1 



prj,,(f,P)<-tr 



l/a' 



(A3) 



for all a > I, where £ = {pxb}xb, P = {Pxh}xb and 

PS = T,b=lPbPxib- 

Proof. Note that since y^/" is operator monotone for a > 
1 [Ml Theorem V.1.9] we have 



Ps^iPs)^ <{YPsj ■ 

Using the fact that J^s = I we hence obtain 
pZciS,P)^^Y.^r{Mgpg) 



1 

— tr 

N 



as promised. 



(A4) 

(A5) 
(A6) 

(A7) 
□ 



3. Lower bound 

Lemma A. 3. The .success probability with post- 
measurement information is at least as large as the 
success probability of a derived problem without post- 
measurement information, i.e., 

Psucci^^P) > niaxpsucc(%,-P) ■ 
y 

Proof. This follows immediately from the discussion by 
noting that 

Y tr (Mgpg) = E E (Mgpg) . (A8) 



□ 



Appendix B: Proofs of Section |III| 

1. Without post-measurement information 

Lemma B.l. For the measurement defined by (|9| 
have 

Q = \ {PxMg + pgMg) = ^ (1 + ysh) I , (Bl) 



and hence Q is Hermitian. 



Proof. We use the shorthand ag-T — '^g^^j- We have 



pgMg = — (I + {vg + ag) ■ r + {vg ■ dg)l) , (B2) 



PxMg ^ ^{l-{vg + Sg)-r+ {vg ■ dg)Ij , (B3) 
where the equality follows from the fact that 

(vg ■ f){ag • f ) = ^ E 4'^4'^{r,. r.} , (B4) 

jk 

= {vg ■ ag)l . (B5) 

Using that vg ■ vg = \\vg\\2 gives our claim. □ 



Lemma B.2. The largest eigenvalue of pg and pg is 

given by 

Amax(ps) = Amax(P5) = ^ ( 1 + 1 1 Wj| | 2) • (B6) 

Proof. We now show that our claim for pg. Our goal is 
to evaluate 



Amax(/5£) = maxtr((T/9jr) , 



(B7) 



where the maximization is taken over all states a. Using 
the fact that the set of operators {l,Vj,iVjTk,...}jk... 
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forms an orthonormal (with respect to the Hilbert- 
Schmidt inner product) basis for the d x d Hermitian 
matrices we can write 




(B8) 



Since tr{TjTk) — for j ^ fc, and we can rewrite 
1 (l + Ej 4'^r,) this gives us 



tr{aps) = ^ (1 + • Vx) 



(B9) 



where s = {s^^\ . . . , s^^n+i)^ g^j^^j . denotes the Euchdean 
inner product. Since cr > if and only if ||s||2 < 1 [T3] 
we have that the maximum in ( B9 1 is attained for a — 
(1 + s(j')rj)/d with 

(BIO) 



\\vsh 



which gives our claim. The argument for pg = 
^ — J2j '^s^^j^ is analogous. □ 



2. With post-measurement information 
Lemma B.3. For our class of problems 

P^ncc i^,P) ^ max psucc (% ) , (B 1 1 ) 

X 

and post-measurement information is useless if and only 
if the maximum on the r.h.s. is attained by x — 
(0,...,0). 

Proof. Let x be the string that achieves the opti- 
mum on the r.h.s of (12). We now claim that Q — 
i [p^Mg + p^Mg^ is an optimal solution to the SDP 
for the problem of state discrimination with post- 
measurement information. First of all, note that 
Lemma [B . IJ gives us that Q is Hermitian. We then have 



by Lemma B.2 that Q > hp~ for all possible x. Our 



claim now follows from Lemma |ll.l[ and by noting that 
for the partition x — (0, . . . , 0) we will always give the 
same answer, no matter what post-measurement infor- 
mation we receive later on. □ 



